Package: live-config
Version: 4.0~alpha31-1
Severity: important
Tags: security
By default, live-config creates a user with known name (user) and password (live). In live images with included openssh-server, this means that anyone can log into a live system immediately once it connects to a network (which it tries to do during boot).